Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: aqy8jOeUssr9dWO2cRIrkgNJMUa6nV8aKQj8IrzNP3E=
Subject key identifier: D0:70:14:9F:3F:83:E4:73:73:79:EB:6A:B2:67:36:04:87:2E:F8:A7
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 0198D54DC426AD1A3965E0DA30BC07B1A978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 148A
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: VN4KscH+YznxDYilY1kmeLJ93+J0zdfhzrK68aOAADI=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c4:26:ad:1a:39:65:e0:da:30:bc:07:b1:a9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=d070149f3f83e4737379eb6ab2673604872ef8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:d0:24:ec:ac:ce:11:52:2a:78:e9:cd:53:
fb:d0:8b:82:55:47:19:72:ec:dd:0a:22:10:93:7d:
37:e6:60:72:81:a4:2d:c4:b4:4b:7a:ec:0e:ba:f8:
87:85:0f:ae:8e:fb:24:94:eb:41:05:1a:11:eb:5b:
69:3c:3a:0e:f8:71:61:ed:90:d6:45:85:34:c4:72:
0c:7d:db:35:c1:3e:3b:58:f1:9c:fe:77:af:50:5d:
79:8c:bf:e1:a3:89:20:94:4a:47:57:36:ba:2a:41:
57:e5:57:35:8a:98:a7:08:fd:53:3e:5b:57:aa:d6:
21:13:96:c1:06:52:fd:7f:a3:63:d4:c6:20:7a:c3:
13:9c:88:d7:27:83:60:8b:11:36:b5:05:79:3a:60:
3f:13:74:8a:97:37:d2:37:d5:5a:14:c2:d3:c1:5e:
23:cd:e7:02:c7:9e:c3:f1:0e:d8:59:a4:a7:cd:43:
52:36:99:bc:20:b8:77:f6:9f:c4:67:a8:80:6f:0b:
f7:fb:23:82:5f:c0:60:c6:30:69:94:42:2a:cc:5d:
34:59:77:85:b2:27:5b:01:68:a6:aa:e3:f3:ab:80:
85:d9:7b:4c:ab:e0:ac:90:a5:10:bf:dd:26:07:25:
98:07:89:ce:f7:df:ff:95:6c:b1:7a:7f:c4:1d:73:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:14:9F:3F:83:E4:73:73:79:EB:6A:B2:67:36:04:87:2E:F8:A7
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dd:96:8d:05:2b:a8:0c:bf:a8:17:33:44:56:ad:6c:93:f8:
40:47:ae:eb:f5:41:fd:9c:17:59:ab:15:df:e6:28:ac:fb:2b:
fc:8c:32:45:d1:8e:f6:cd:1d:99:58:ac:f1:5f:60:13:55:36:
57:a3:1c:61:97:61:9b:ac:1f:03:97:02:84:aa:4c:45:fb:bf:
fc:09:46:c9:78:42:65:39:5b:6c:ae:56:39:f3:7d:c1:b4:ca:
cb:b7:d9:06:45:e0:e0:46:01:ec:d9:07:ba:d8:3d:9c:da:c7:
d0:11:88:1f:49:a3:23:6d:75:22:0f:a5:54:15:ba:ba:79:9d:
2e:bc:f7:00:2d:95:84:ed:cb:86:db:31:8b:ed:5d:95:8e:bb:
ec:d8:7d:be:92:5e:bb:45:30:6b:72:8a:d9:65:17:78:e9:c1:
f3:0c:01:a5:93:63:c2:04:f9:0b:c0:56:bd:fc:2b:b9:11:28:
1a:a6:d6:1c:91:1a:08:c0:03:7f:97:14:d0:9c:eb:c4:8e:d6:
9a:b2:9c:bb:6c:31:f7:eb:32:1c:47:2f:ee:b1:82:79:00:29:
ed:10:9f:12:38:d4:89:67:ef:54:9c:77:02:8e:48:06:e8:7a:
c8:93:e1:7d:e0:a9:00:9d:36:a6:a8:63:19:4a:6a:50:24:29:
46:49:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:24 2025 by rpki-client